BSOD tcpip.sys errors, DRIVER_IRQL_NOT_LESS_OR_EQUAL

[GregFin]

Hi all,

Hoping someone can help with some BSOD errors I keep having, the first two were related to "tcpip.sys errors, DRIVER_IRQL_NOT_LESS_OR_EQUAL" so I've since managed to update the driver for my network adaptor thinking it may have been that causing the issue. Since then I've had another two BSOD, the first being, "ntkrnlmp.exe (nt!KeBugCheckEx+0x0)", and the second, "ntoskrnl.exe (nt+0x78A8A)".

I've attached the debug information zip from the DM Log Collector as instructed in the sticky post.

Thanks in advance for any help with this, it's very much appreciated!
Greg

 

[Golden]

fffff880`033cbc28  00000000`00000000
fffff880`033cbc30  fffff880`03163180
fffff880`033cbc38  fffff880`04590c30Unable to load image \??\C:\Windows\system32\Drivers\[B][COLOR="Red"]SYMEVENT64x86.SYS[/COLOR][/B], Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMEVENT64x86.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT64x86.SYS
 SYMEVENT64x86+0x10c30
fffff880`033cbc40  00000000`00000001
fffff880`033cbc48  00000000`00000001
fffff880`033cbc50  fffffa80`0810a4d0

Driver Reference Table - SYMEVENT64x86.SYS

Unfortunately, I think its yet another instance of Norton interfering with the system. I recommend uninstalling it and using MSE instead - MSE is known to never cause BSOD's. You can use also, in addition to MSE, use the free version of EmiSoft as an on-demand scanner for additional peace of mind.

Please try that and let us know how you get on.

 

[GregFin]

Thanks for the quick response, uninstalling Norton & installing MSE as I type this, will let you know how it goes - you're a life saver if this works as I have some fairly urgent work I need to complete & was just about ready to give up on it before finding this forum!

 

[Golden]

No worries....post back when you can....I'll be watching

FYI - out of interest, this from an earlier .dmp file - note the Norton reference yet again.

fffff880`079b0418  00000000`00000000
fffff880`079b0420  fffffa80`068731c0
fffff880`079b0428  fffff880`01a6299a tcpip!TcpMatchReceive+0x1fa
fffff880`079b0430  fffffa80`03e5f230
fffff880`079b0438  fffff880`042b0500Unable to load image \??\[B][COLOR="Red"]C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\IPSDefs\20140926.003\IDSvia64.sys[/COLOR][/B], Win32 error 0n2
*** WARNING: Unable to verify timestamp for IDSvia64.sys
*** ERROR: Module load completed but symbols could not be loaded for IDSvia64.sys
 IDSvia64+0x49500
fffff880`079b0440  fffffa80`04761b00
fffff880`079b0448  00000000`00000000
fffff880`079b0450  fffffa80`04775fa0
fffff880`079b0458  00000000`00000000
fffff880`079b0460  fffff880`01b68128 tcpip!WPP_GLOBAL_Control

 

[GregFin]

It was all looking fine then another BSOD
I've attached an updated zip of the log files if you can take a look at the latest one for me

I'm not sure if it was a final error from Norton as was still needing to reboot after the uninstall, long shot?

Thanks,
Greg

 

[Golden]

The crash at 11:46 blames the NVidia video driver:

fffff800`00b9bdd8  00000000`00000000
fffff800`00b9bde0  fffff800`00b9be70
fffff800`00b9bde8  fffff880`0f29dc85Unable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for [COLOR="Red"][B]nvlddmkm.sys[/B][/COLOR]
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
 nvlddmkm+0x46c85
fffff800`00b9bdf0  00000000`00000001
fffff800`00b9bdf8  00000000`00000002
fffff800`00b9be00  fffffa80`05d5a000

0: kd> lmvm nvlddmkm
start             end                 module name
fffff880`0f257000 fffff880`0ff61000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: [COLOR="red"][B]nvlddmkm.sys[/B][/COLOR]
    Timestamp:        [COLOR="red"][B]Thu Jan 31 18:15:04 2013[/B][/COLOR] (510A2100)
    CheckSum:         00CEDB22
    ImageSize:        00D0A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Its slightly outdated....see if a more up-to-date driver is available, and install it using this guide please:
http://www.sevenforums.com/tutorials/327414-nvidia-drivers-avoid-problems.html

Let us know how it goes.

I noted your system is quite outdated - did it originally have XP or Vista installed to it?

 

[GregFin]

Hi Golden,

It looks like I'm already running the latest driver available?

Am I right to think that?

Thanks,
Greg

 

[Golden]

Yep, thats correct. If you uninstall it, then reinstall it following the guide, it will show you how to install the driver only, and not the rest of the NVidia utilities, which often can cause issues.

How old is the computer?

 

[Golden]

Greg, Im about to hit the sack....Ive asked Arc to keep an eye on this, so please post back as you can.

 

[Arc]

OK, I will wait for any further BSOD reported by GregFin.

 

[GregFin]

Thanks for the replies guys, I've not completed the removal & re-install of NVIDIA drivers yet as was worried as think I have the NVIDIA motherboard & don't want to make things worse! I have completed a lot of Windows updates that I'd missed for a while, so hoping that's helped - no more BSOD... yet

Thanks,
Greg

 

[Arc]

Welcome.

I cannot disagree that nvidia chipset boards are troublesome nowadays because of the unavailability of the chipset drivers. But windows updates are always good. A lot of people use those boards using drivers provided by windows updates only.

 

[GregFin]

Was running OK for a couple of hours then BSOD 'out of the blue' (pun intended).
Updated DM Log Collector zip attached, looks like it's a TCPIP one again... help appreciated!

Many thanks,
Greg

rb:

 

[Arc]

The BSODs are seeming to be network related.

BugCheck D1, {fffff88103d61ae0, 2, 1, fffff88001a66872}

[COLOR=Red]Probably caused by : tcpip.sys[/COLOR] ( tcpip!TcpTcbHeaderSend+1f2 )

Followup: MachineOwner
---------

The Realtek 8185 Wireless device is disabled. So you are using the Realtek ethernet. There is a possibility of an update to this driver. Get the Win7 and Server 2008 R2 Auto Installation Program (second one of the list) from Realtek and install it.

Also, it is an old branded desktop PC. Some failure from the part of the display driver is also noticed there. The display driver is a part of the nForce chipset. Go to Drivers - Download NVIDIA Drivers and see if it offers any updates to your display driver.

Check if the Power Supply Unit (PSU) supplying adequate power to the computer or not.
eXtreme Power Supply Calculator
Also let us know the wattage of the PSU that you have.

Is the computer hot? Report us the heat of the computer after a couple of hours of your normal usage. Upload a screenshot of the summery tab of Speccy. Alternatively, you can publish a Speccy snapshot too: http://www.sevenforums.com/tutorials/311593-speccy-publish-snapshot-your-system-specs.html .

Finally, as there is multiple elements are being blamed in every single crash dumps, test your RAM modules for possible errors.

How to Test and Diagnose RAM Issues with Memtest86+
​

Run memtest86+ for at least 8 consecutive passes.

If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

Let us know the results.
____________________________________________

BugCheck D1, {fffff88103d61ae0, 2, 1, fffff88001a66872}

Probably caused by : tcpip.sys ( tcpip!TcpTcbHeaderSend+1f2 )

Followup: MachineOwner
---------

fffff800`00b9ba20 fffff880`01a876f4 tcpip!TcpTcbHeaderSend+0x1f2
fffff800`00b9bbd0 fffff880`01a62745 tcpip!TcpFlushDelay+0x204
fffff800`00b9bcb0 fffff880`01a5af37 tcpip!TcpPreValidatedReceive+0x3e5
fffff800`00b9bd80 fffff880`01a5aaaa tcpip!IppDeliverListToProtocol+0x97
fffff800`00b9be40 fffff880`01a5a0a9 tcpip!IppProcessDeliverList+0x5a
fffff800`00b9bee0 fffff880`01a57d4f tcpip!IppReceiveHeaderBatch+0x23a
fffff800`00b9bfc0 fffff880`01a57322 tcpip!IpFlcReceivePackets+0x64f
fffff800`00b9c1c0 fffff880`01a5674a tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff800`00b9c2a0 fffff800`034dd878 tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda
fffff800`00b9c2f0 fffff880`01a56e42 nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff800`00b9c3d0 fffff880`0177c0eb tcpip!FlReceiveNetBufferListChain+0xb2
fffff800`00b9c440 fffff880`01745ad6 ndis!ndisMIndicateNetBufferListsToOpen+0xdb
fffff800`00b9c4b0 00000000`00000000 ndis!ndisMDispatchReceiveNetBufferLists+0x1d6

fffff800`00b9bde8  fffff880`0f29dc85Unable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
 nvlddmkm+0x46c85

    Image name: nvlddmkm.sys
    Timestamp:        Thu Jan 31 13:15:04 2013